| In recent years,with the increase of car ownership in the country,road traffic accidents happen frequently.In order to reduce traffic accidents,alleviate traffic congestion and realize responsibility tracing,vehicle self-organized network(VANET)technology has been developed and applied rapidly.Vehicles realize the transmission and reception of current road data through wireless network channel.However,in the traditional communication authentication process,the authenticated party usually sends its own identity information to complete the authentication.Although this can effectively avoid security threats such as forgery,tampering,denial after the event,there are still problems such as identity privacy disclosure and low efficiency.At the same time,every time the data uploaded by the vehicle is labeled with location and time,which makes the sensitive information such as social relations,living habits and economic conditions of the user greatly threatened.In addition,considering the large amount of redundancy of unstructured data such as pictures,videos,text files,etc.,the transmission and storage of large amounts of data must be cloud storage.The utilization of space and bandwidth brings great pressure.In order to improve storage efficiency,save communication channels and reduce management overhead,data De-duplication is a feasible and effective data technology.However,in the process of data De-duplication,we often face the problem of violent dictionary attack.On the other hand,considering the separation of ownership and management rights of vehicle users to cloud data,as well as the open and complex network communication environment in VANET,vehicle users also face the security threat of access control in the process of cloud data De-duplication,and attackers can obtain the download Right of files with a single file tag.This paper focuses on how to realize secure cloud data De duplication in the Internet of vehicles.The main work is as follows:(1)In view of the problem of identity privacy disclosure in VANET cloud,we analyze the requirements and design an efficient anonymous authentication scheme,which uses the properties of hash function to complete the identification of message source,so that the trusted center can realize the aggregation authentication of vehicle,road test unit and cloud server.Using pseudonym to anonymously identify vehicles,and for vehicles with malicious behavior,the trusted center can trace the real identity of vehicles in a short time.Our scheme can not only meet the security requirements of anonymous authentication,but also improve the efficiency of identity authentication to a large extent because of the simple hash calculation.(2)To solve the problem of how to realize data De-duplication safely in VANET cloud,we analyze the requirement and design an efficient scheme of data De-duplication.On the basis of the above anonymous authentication,We use a series of key servers to sign the blind file hash as the convergence key.Because of the characteristics of threshold secret sharing,this kind of key can not be colluded with a few cloud Copied by the key server.At the same time,because the signature of the key server is blindly generated by the semantic security encryption algorithm,any information of the file will not be exposed to any signer,so the confidentiality of the data is guaranteed and the violent dictionary attack is avoided.In addition,we build a document ownership certificate with Bloom filter,which can exclude unauthorized users with overwhelming probability.The results of security proof and performance analysis show that our scheme not only meets the security requirements of cloud data De duplication,but also has high efficiency.The innovations of this paper are as follows:(1)using message authentication and group key agreement mechanism based on Chinese remainder theorem,an anonymous authentication scheme with aggregate authentication is designed.(2)On the basis of anonymous authentication,the third-party multi-key server is introduced,the secret sharing mechanism based on Chinese remainder theorem is used to generate convergence key in collaboration with files,and a file ownership certificate is constructed by Bloom filter to prevent unauthorized users from obtaining the download Right of files by a single hash value. |